Abstract: A computer-executable method, system, and computer program product for managing a data storage system using a distributed write-through cache, wherein the data storage system comprises a first node, a second node, and a data storage array, wherein the first node includes a first cache and the second node includes a second cache, the computer-executable method, system, and computer program product comprising providing cache coherency on the data storage system by synchronizing the second cache with the first cache based on I/O requests received at the first node.

Abstract: A method, computer program product, and computing system for defining a storage space having a defined capacity within a storage system. The storage system includes a frontend system and a backend system. A first portion of the storage space is located within the frontend system. A second portion of the storage space is located within the backend system. Usage of a data item stored within the storage space is monitored to identify a usage pattern. The data item is migrated to either the first portion of the storage space or the second portion of the storage space based, at least in part, upon the usage pattern.

Abstract: A method, computer program product, and computing system for processing one or more data chunks on a host server. The one or more data chunks are destined for storage within a portion of a data array coupled to the host server. The one or more data chunks are stored within a host cache system included within the host server. Storage criteria concerning the portion of a data array is reviewed. The storage criteria includes an array bandwidth allotment that defines a maximum bandwidth between the host server and the portion of the data array. The one or more data chunks are written to the portion of the data array based, at least in part, upon the storage criteria.

Abstract: Example embodiments relate to methods, systems, and a computer program product for detecting and responding to the presence of malware persistently executing in a monitored virtual machine of a virtual computing platform. The method includes logging I/O requests at a hypervisor kernel in a kernel log and at a virtual machine (VM) managed by the hypervisor in a VM log. The logged I/O requests then may be compared to detect evidence of malware according to differences between the I/O requests logged in the VM log and the kernel log.

Abstract: Example embodiments of the present invention relate to a method, a system, and a computer program product for re-syncing a distributed cache after node disconnection. The method includes stopping cache coherency among a plurality of nodes at times a first node among the plurality of nodes is in a disconnected state and determining the first node is no longer in the disconnected state. A second cache at a second node then may dump portions of the second cache at the second node inconsistent with changes made to a first cache at the first node at times the first node was in the disconnected state.

Abstract: A method, computer program product, and computing system for receiving an indication of a cold cache event within a storage system. The storage system includes a multi-tiered data array including at least a faster data tier and a slower data tier. A data list that identifies at least a portion of the data included within the faster data tier of the multi-tiered data array is obtained from the multi-tiered data array. At least a portion of the data identified within the data list is requested from the multi-tiered data array, thus defining the requested data. The requested data is received from the multi-tiered data array.

Abstract: A method, computer program product, and computing system for storing a plurality of frontend data chunks within a cache system. The plurality of frontend data chunks correspond to a plurality of backend data chunks stored within a data array. A device weight is determined for each of the plurality of backend data chunks. The device weight is indicative of the type of storage device upon which each of the plurality of backend data chunks is stored within the data array. A deletion score is assigned to each of the plurality of frontend data chunks. Each deletion score is based, at least in part, upon the device weight determined for its corresponding backend data chunk.

Abstract: Disclosed herein are techniques for use in fraud detection. In one embodiment, the techniques comprise a method. The method comprises receiving an encrypted current location associated with a user. The method also comprises obtaining an encrypted historical location associated with the user and an encrypted location sensitivity metric that relates to a distance within which locations are considered to be the same. The method further comprises performing an authentication operation based on the encrypted current location, the encrypted historical location and the encrypted location sensitivity metric.

Abstract: A computer implemented method, computer program product and comprising rolling an image to a point in time in a protection window by applying write data using write metadata and examining read metadata, the write data, and the write metadata to determine if the image was accessed by an intruder.

Abstract: A method, computer program product, and computing system for associating a heatmap file with a multi-portion data file located on a data array. The heatmap file is configured to monitor the usage of each portion of the multi-portion data file. At least one portion of the multi-portion data file is used via a virtual machine executed on a first physical machine. The heatmap file is updated to reflect the usage of the at least one portion of the multi-portion data file.

Abstract: Example embodiments relate to methods, systems, and a computer program product for detecting and responding to the presence of malware persistently executing in a monitored virtual machine of a virtual computing platform. The method includes logging I/O requests at a hypervisor kernel in a kernel log and at a virtual machine (VM) managed by the hypervisor in a VM log. The logged I/O requests then may be compared to detect evidence of malware according to differences between the I/O requests logged in the VM log and the kernel log.

Abstract: A method, computer program product, and computing system for associating a tracking file with a multi-portion data file located on a data array. The tracking file is configured to monitor the status of each portion of the multi-portion data file. At least one portion of the multi-portion data file is modified via a virtual machine executed on a first physical machine. The tracking file is updated to reflect the modification of the at least one portion of the multi-portion data file.

Abstract: A method, computer program product, and computing system for processing one or more data chunks on a host server. The one or more data chunks are destined for storage within a portion of a data array coupled to the host server. The one or more data chunks are stored within a host cache system included within the host server. Storage criteria concerning the portion of a data array is reviewed. The storage criteria includes an array bandwidth allotment that defines a maximum bandwidth between the host server and the portion of the data array. The one or more data chunks are written to the portion of the data array based, at least in part, upon the storage criteria.

Abstract: A computer-executable method, system, and computer program product of managing a hierarchical data storage system, wherein the data storage system includes a first level of one or more hosts, a second level of one or more storage appliances, and a data storage array, the computer-executable method, system, and computer program product comprising receiving an I/O request from a first host of the one or more hosts, wherein the I/O request relates to a portion of data on the data storage array, analyzing the I/O request to determine a status of the portion of data on the data storage system, based on the determination, providing an update to a second host of the one or more hosts based on the I/O request, wherein the portion of data is cached on the second host of the one or more hosts, and processing I/O request by sending I/O request to data storage array.

Abstract: A method, computer program product, and computing system for processing one or more data chunks on a host server. The one or more data chunks are destined for storage within a portion of a data array coupled to the host server. The one or more data chunks are stored within a host cache system included within the host server. Storage criteria concerning the portion of a data array is reviewed. The storage criteria includes an array bandwidth allotment that defines a maximum bandwidth between the host server and the portion of the data array. The one or more data chunks are written to the portion of the data array based, at least in part, upon the storage criteria.

Abstract: A method, computer program product, and computing system for defining a first server and a second server within a server cluster. The first server includes a first cache system and the first and second servers are coupled to a data array that includes a LUN. The LUN is reserved for exclusive access by the first server, thus generating a first server reservation. Data associated with the LUN is cached within the first cache system of the first server. A loss of the first server reservation is sensed. In response to a loss of the first server reservation, the first cache system of the first server is purged.

Abstract: A host-based memory is maintained for a host computing device. Data obtained from a storage array in response to one or more read requests is stored in the host-based memory. The storage array includes an array-based memory and is configured to perform one or more data pre-fetch operations. The host computing device monitors for the occurrence of a set of sequential read requests. The set of sequential read requests is sent from the host computing device to the storage array when one or more read requests of the set of sequential read requests match data stored in the host-based memory. Thus, the storage array is enabled to perform one or more data pre-fetch operations in accordance with the array-based memory and the set of sequential read requests.

Abstract: A method, computer program product, and computing system for processing a read request for a piece of content stored within a storage system. If it is determined that the piece of content is not present within a front end cache system of the storage system, requesting the piece of content from a multi-tiered data array, thus defining requested content. The requested content is received from the multi-tiered data array. A tier designator, concerning the requested content, is received that identifies a specific data tier within the multi-tiered data array from which the requested content was obtained.

Abstract: A method, computer program product, and computing system for processing, on a host, a read request for a portion of a data file stored on a backend storage system. The portion of the data file is obtained from the backend storage system. The portion of the data file is divided into a plurality of file chunks based, at least in part, upon a file type. Each of the plurality of file chunks is compared to other file chunks stored within a frontend cache system associated with the host to identify unique file chunks within the plurality of file chunks. The unique file chunks are stored within the frontend cache system.

Abstract: Embodiments are directed to providing a certificate extension to an authentication certificate, to validating an authentication certificate request and to implementing authentication certificates that include certificate extensions. In an embodiment, a computer system accesses an authentication certificate request that is to be sent to a validation server for validation and to a certificate authority for issuance of an authentication certificate. The computer system appends an extension to the authentication certificate request. The extension includes origination information about the authentication certificate. The computer system then sends the authentication certificate request with the appended extension to the validation server for validation.